Siebel SSO Integration with Novell eDirectory

I am wondering if anyone on this forum has worked with integrating a SSO solution using Novell eDirectory and Siebel. I have personally worked on SSO integrations with Siebel using Cleartrust and Siteminder and they are all basically the same concept however, I am facing issues trying to get the Novell SSO solution to work with Siebel.
I am using the standard LDAP Security adapter and I can make a basic connection into Siebel using LDAP. When implementing SSO I am using a "header" value and a custom userspec name that is different then then "Remote_Use" name mentioned in the Siebel SSO documentation. With SSO turned on I am successfully able to authenticate and almost get all the way into the home page of Siebel before the IE browser crashes. The SWSE log files, interestingly enough, show that my userspecsource is equal to header and that my userspec is correct and then I see the SISNAPI connection occurring between the Siebel We Server and the Siebel AOM but then after the IE browser crashes I see the SWSE log which then tries to picks up Siebel's default userspec " Remote_User" value which is not confiugred or turned on anywhere from within the application. I was just wondering if anyone else had faced similar issues when integrating Siebel into Novell eDirectory for SSO. I have also reviewed the configuration on Novell's side and they are protecting the correct object manager and are also using the same exact userspec name as what we have defined within the eapps.cfg of Siebel. We are using Siebel 8.1.1 Any ideas or help would be greatly appreciated as I have not gotten much support from my open SR on this issue.

I am wondering if anyone on this forum has worked with integrating a SSO solution using Novell eDirectory and Siebel. I have personally worked on SSO integrations with Siebel using Cleartrust and Siteminder and they are all basically the same concept however, I am facing issues trying to get the Novell SSO solution to work with Siebel.
I am using the standard LDAP Security adapter and I can make a basic connection into Siebel using LDAP. When implementing SSO I am using a "header" value and a custom userspec name that is different then then "Remote_Use" name mentioned in the Siebel SSO documentation. With SSO turned on I am successfully able to authenticate and almost get all the way into the home page of Siebel before the IE browser crashes. The SWSE log files, interestingly enough, show that my userspecsource is equal to header and that my userspec is correct and then I see the SISNAPI connection occurring between the Siebel We Server and the Siebel AOM but then after the IE browser crashes I see the SWSE log which then tries to picks up Siebel's default userspec " Remote_User" value which is not confiugred or turned on anywhere from within the application. I was just wondering if anyone else had faced similar issues when integrating Siebel into Novell eDirectory for SSO. I have also reviewed the configuration on Novell's side and they are protecting the correct object manager and are also using the same exact userspec name as what we have defined within the eapps.cfg of Siebel. We are using Siebel 8.1.1 Any ideas or help would be greatly appreciated as I have not gotten much support from my open SR on this issue.

Similar Messages

  • Issue during integrating OIM 9.1 with novell edirectory 8.8

    Hi,
    We are trying to integrate OIM 9.1 with Novell edirectory 8.8 using novell edirectory 9.0.4.2 connector.
    while privisioning i m facing the following issue
    DOBJ.THROWABLE_IN_SAVE Unhandled throwable java.lang.NoClassDefFoundError in com.thortech.xl.dataobj.tcScheduleItem's save.
    User is getting created OID but not provisioned to edirectory.
    Thanks in Advance
    Manju

    Hi,
    Thanks for responding.
    I am trying to provision users to novell edirectory.
    I create user in Oracle Idenity Manager 9.1 then select the Resource profile and provision new resource(to edirectory 8.8).
    During the last step of provisioning when i click continue button Oracle Idenity Manager is throwing the below error in the next screen with message "Provisioning is been initiated". But user is not created in the edirectory.
    DOBJ.THROWABLE_IN_SAVE Unhandled throwable java.lang.NoClassDefFoundError in com.thortech.xl.dataobj.tcScheduleItem's save.
    In the open tasks, System Validation task is created with the status Pending.
    Please help me to rectify this issue.
    Also let me know whether anyone has tried to integrate Oracle Idenity Manger 9.1 with edirectory 8.8 using Novell edirectory 9.0.4.2 connector.
    Thanks

  • UC - LDAP integration to Novell eDirectory

    Hi,
    Looks UC version 8 not support Novell eDirectory. Any road map?
    Thanks in advance,

    I had a similar potential requirement a few months ago and my Cisco SE was able to dig out details of a customer that was using Novell eDirectory. There is an appnote published at the link below:
    http://www.novell.com/communities/node/3028/integrating-cisco-unified-call-manager-versions-5-and-6-edirectory
    Usual caveats - not supported by TAC etc.
    Please rate if helpful.

  • Issue with SIEBEL - XI Integration with SOAP

    Hi,
    I have an issue with the integration of SIEBEL and XI via SOAP.
    In the scenario Siebel calls a synch Web Service on XI. The provided WSDL was implemented on Siebel and when Siebel calls the Web Service the message is received correctly by the XI SOAP Sender Adapter and I can see the message in the Message Monitoring (SXMB_MONI).
    The issue is during the mapping as the payload does not seem to comply with the structure XI expects in the message interface. When I load the payload of the SOAP Request send by Siebel into the Message Mapping Test Tool, all fields below the Message Type are in red. I found out that the problem lies in the way the namespace is addressed.
    The payload I receive from Siebel that is not working in the mapping looks like this:
      <?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
    - <MT_KUNDE_CRM xmlns="http://www.xyz.de/ariva/Kunden" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    - <KUNDE>
    - <Account>
      <CRM_Account_ID>1-S3YU</CRM_Account_ID>
      <Customer_Segment>Other Account</Customer_Segment>
      <Target_Market>Other Markets</Target_Market>
      <Currency>DEM</Currency>
      <Inactive_Account>N</Inactive_Account>
      <Country />
      <Account_Name>ATK Test Company 1</Account_Name>
      </Account>
    - <Account_Address>
      <Country>England</Country>
      </Account_Address>
      </KUNDE>
      </MT_KUNDE_CRM>
    The structure that works looks like this:
      <?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
    - <kun:MT_KUNDE_CRM xmlns:kun="http://www.xyz.de/ariva/Kunden" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    - <KUNDE>
    - <Account>
      <CRM_Account_ID>1-S3YU</CRM_Account_ID>
      <Customer_Segment>Other Account</Customer_Segment>
      <Target_Market>Other Markets</Target_Market>
      <Currency>DEM</Currency>
      <Inactive_Account>N</Inactive_Account>
      <Country />
      <Account_Name>ATK Test Company 1</Account_Name>
      </Account>
    - <Account_Address>
      <Country>England</Country>
      </Account_Address>
      </KUNDE>
      </kun:MT_KUNDE_CRM>
    The ony difference between the two is that the second messages uses a prefix (kun) for the namespace while the first does not use it, although it is correct from an XML syntax perspective.
    Can anybody help?
    Thanks in advance.
    Alex

    Hi
    Why don't you try and create a schema (XSD) which will prefix kun to the input, instead of using the message type created by XI.
    Just a suggestion.
    regards
    Sameer

  • OBIEE 11.1.1.5 SSO integration with OAM 11gR1 (11.1.1.5)

    Hi,
    I am integrating OBIEE 11.1.1.5 with OAM 11gR1 (11.1.1.5).
    I have configured as per section 12.3 of following link:
    http://docs.oracle.com/cd/E22203_01/doc.31/e20664/chapter_12.htm#CHDFAFHH
    After making all these configurtions, when i access:
    http://<OHS server>:<OHS port>/analytics
    User is getting prompted for auth from OAM. After successful auth, request gets redirected to WebLogic server hosting the OBIEE app. I have verified in OBI logs that the header value OAM_REMOTE_USER gets passed to OBI.
    But even with all this, after successful OAM authentication, user is getting prompted with OBI login page.
    Pls help.
    Thanks

    Hi Abhinay,
    I have already make the following configurations as per the documentation:
    To enable SSO:
    1.Log in to OBIEE at
    http://[OBIEE server:port]/em.
    2.Click Farm_<OBIEEDomain>_domain > Business Intelligence > Coreapplication.
    3.Click the Security tab.
    4.Select Enable SSO.
    5.Select SSO Provider: Oracle Access Manager.
    6.Click Apply and Activate Changes.
    Do we need to make some other configurations also at OBIEE EM ?
    Thanks

  • Urgent Help - OBIEE11.1.1.6 SSO INTEGRATION WITH RSA CLEARTRUST

    Can anyone help me what are the steps that need to be done to integrate OBIEE 11G Single sign on with RSA Clear trust. Any help will be appreciated

    Check this links
    http://docs.oracle.com/cd/E10415_01/doc/bi.1013/b40058.pdf
    see 5 and 8 chapters
    and also
    http://debaatobiee.wordpress.com/tag/rsa-obiee-siebel-analytics/
    Pls mark if helps

  • EP 6.0 SP2 integration with Novell Groupwise

    Hi,
    I am trying to integrate novell groupwise (email system) with EP 6.0 Collaboration Launch pad.  So user can get all the functionality of CLP.  Rightnow EP6 support only lotus and MS exchange server (out of the box).  Seems we need to write some email transport, using KM java API.  Please send me some how to guides or step-by-step info or some sample code.   It would be very helpful.
    Thanks
    Regards
    gana

    I have got very good experiences with Groupwise connectivity with the SAP Portal over KM Transport APIs.
    Is your question still relevant?
    If you want information, contact me.
    My contact information can be found in my SDN personal profile.
    Best Regards,
    Hüdayi Mengus
    Edited by: Hüdayi Mengus on Aug 19, 2009 12:39 AM

  • Integrating with Novell Groupwise

    Is there anyway to use the integration tools of iPhone 2.0 to integrate with my mail, contact and calendars on Groupwise?

    Unless Groupwise has IMAP4 or POP3 enabled. There is no built in Groupwise connector.

  • How to Migrate 10g sso integrate with EBS 11.5.10.2  to 11g OAM(oracle access manager) with R12.1.3

    How to Migrate 10g sso integrated with EBS 11.5.10.2  to 11g OAM(oracle access manager) with R12.1.3
    Os:Linux 64 bit
    database:11.2.0.3 Rac

    Hi,
    You could try working through the EBS -> APEX integration article on the Apex community site (http://www.oracle.com/technetwork/developer-tools/apex/apex-ebs-wp-cabot-consulting-169064.pdf)
    Rod West

  • OID Installation Questions pertaining to integration with EBS 11.5.10.2

    Our Environment is E-Business Suite 11.5.10.2 and we want to investigate/view OID/SSO in action. Ultimately, we'll attempt to use Microsoft Active Directory as the source (of truth). I had performed OID/SSO integration with EBS about 3 years ago and remember the "overall" scheme, but Oracle's documentation/downloads page has left me thoroughly confused, hence, I am asking those that have been through the process .... THANKS IN ADVANCE
    (1) Do I need to install the base AS 10g Infrastructure and Metadata Repository via 10.1.2.0.2 installation or can I go directly to installing OID 10.1.4.0.1 ??
    Here is what I believe the steps to be, PLEASE, correct me if I am wrong ...
    (1) Install 10.1.2.0.2 Application Server Infrastructure by selecting "Infrastructure and Metadata Repository"
    (2) Install 10.1.4.0.1 and select to upgrade an existing 10.1.2.0.2 installation. Once 10.1.4.0.1 has upgraded everything, including the database to 10.1.0.5, I assume that I can simply remove 10.1.2.0.2 through the Oracle Installer. Is this correct ??
    (3) Once upgrade to 10.1.4.0.1, I believe that I need to download a Metadata Upgrade Assistant patch, (mrua), and run mrua,sh to upgrade MR to 10.1.4.0.1 which will be apparent by querying app_registry view.
    (4) Upgrade 10.1.4.0.1 to 10.1.4.3
    The documentation is confusing and hard to find for me. Do these steps seem to accomplish the tasks or am I missing something ??
    THANKS IN ADVANCE

    I didn't do the install myself but we went straight to installing 10.1.4 Identity Manangement, although I believe that Infrastructure components which underly it are essentially the same as 10.1.2. As far as I know you can't use 10.1.3 because it lacks those infrastucture components.
    See MOS Doc 233436.1

  • Synchronization of OID and Novell Edirectory

    I did set up OID to synchronize with Novell edirectory using dipassistant, bootstrapped it and run ODISRV with the correct configuration number. Novell edirectory is leading, admin is done in edirectory only. Authentication is done through external authentication at the edirectroy. Works too.
    Adding users, groups and users to groups works fine. Even removing users from groups works ok. The only thing that does not work is deleting users or groups. They still exist in OID after removing them from edirectory.
    I tried setting the 'check all entries' configuration parameter to true: no results.
    Set the debug level to 511: I get debug info, but deletions are not detected at all.
    Any ideas, anyone?
    Robbert van der Hoorn
    OSA it Automation

    Part of the problem solved. This is a weird situation: allthough creating new entries is done every 60 seconds, reconciliation is done once a day (24 hrs, i.e. 86400 seconds..).
    This explains (half) the sudden error message I get: after failing deleting one of the groups, reconcile stops. This group failed to delete for some reason, maybe because it came from a different bootstrapped profile, and domain mapping rules failed on this group. After deleting manually some problematic groups, reconcile works.
    The weird thing however is this: the reconciliation period parameter IS NOT SHOWN in Oracle Directory Manager 10.1.4!!! (Tried 2 installations. on windows server 2003!) Using OID Manager 10.1.2 (same platform) however showed me this parameter, and after setting it to 60 seconds, reconcile does show up and log in the.aud files every minute (which may not be desired to run every minute in prod. situations off course). I know (now) this interval can be set using dipassistant.
    Once reconcile is running, I get a new error in my trace file:
    Unable to delete the entry :cn=agroup1,cn=roc,cn=groups,dc=rocvantwente,dc=nl as the binddn doesnot have permission to delete it javax.naming.NoPermissionException: [LDAP: error code 50 - Insufficient Access Rights]; remaining name 'cn=agroup1,cn=roc,cn=groups,dc=rocvantwente,dc=nl'
    [LDAP: error code 50 - Insufficient Access Rights]
    Exception in reconcile()null
    [LDAP: error code 50 - Insufficient Access Rights]
    testImport : Error in executing reconciler: null
    javax.naming.NoPermissionException: [LDAP: error code 50 - Insufficient Access Rights]; remaining name 'cn=agroup1,cn=roc,cn=groups,dc=rocvantwente,dc=nl'
    Update: problem occurs with groups only. Users can be reconciled perfectly.
    The bind dn in this case is orcladmin.... ideas?
    Thanks,
    Robbert
    Message was edited by:
    Robbert van der Hoorn
    (Problem not completely solved after all)
    Message was edited by:
    user536188

  • SharePoint 2010 with LDAP authentication, using NOVELL eDirectory

    One of my customers needs a SharePoint application that allows people to authenticate with either an Active Directory account (internal staff) or a Novell eDirectory account (external customers).
    Using the following article as a base guide (http://blogs.technet.com/b/speschka/archive/2009/11/05/configuring-forms-based-authentication-in-sharepoint-2010.aspx)
    I configured a claims-based test application that had Windows authentication enabled and Forms based authentication (FBA) enabled (this is on a Windows 2008 server and not a domain controller)
    In the Membership provider name text box I entered "LdapMember"
    In the Role provider name  text box I entered "LdapRole"
    In the web.config for the SharePoint Central Admin, I modified/added the following details right before </system.web>
    <membership>
    <providers>
    <add name="LdapMember"
    type="Microsoft.Office.Server.Security.LdapMembershipProvider, Microsoft.Office.Server, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c"
    server="ldap.server.address"
    port="389"
    useSSL="false"
    connectionUsername="cn=ldapserviceid,ou=sharepoint,ou=test,ou=location,o=validobject"
    connectionPassword= "validpassword"
    userDNAttribute="dn"
    userNameAttribute="cn"
    userContainer="OU=people,O=validobject"
    userObjectClass="person"
    userFilter="(ObjectClass=person)"
    scope="Subtree"
    otherRequiredUserAttributes="sn,givenname,cn" />
    </providers>
    </membership>
    <roleManager enabled="true" defaultProvider="AspNetWindowsTokenRoleProvider" >
    <providers>
    <add name="LdapRole"
    type="Microsoft.Office.Server.Security.LdapRoleProvider, Microsoft.Office.Server, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c"
    server="ldap.server.address"
    port="389"
    useSSL="false"
    connectionUsername="cn=ldapserviceid,ou=sharepoint,ou=test,ou=location,o=validobject"
    connectionPassword= "validpassword"
    groupContainer="OU=people,O=validobject"
    groupNameAttribute="cn"
    groupNameAlternateSearchAttribute="samAccountName"
    groupMemberAttribute="member"
    userNameAttribute="sAMAccountName"
    dnAttribute="distinguishedName"
    groupFilter="((ObjectClass=group)"
    userFilter="((ObjectClass=person)"
    scope="Subtree" />
    </providers>
    </roleManager>
    I modified the SecurityTokenServiceApplication web.config with these details
    <system.web>
    <membership>
    <providers>
    <add name="LdapMemebr"
    type="Microsoft.Office.Server.Security.LdapMembershipProvider, Microsoft.Office.Server, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c"
    server="ldap.server.address"
    port="389"
    useSSL="false"
    connectionUsername="cn=ldapserviceid,ou=sharepoint,ou=test,ou=location,o=validobject"
    connectionPassword= "validpassword"
    userDNAttribute="dn"
    userNameAttribute="cn"
    userContainer="OU=people,O=validobject"
    userObjectClass="person"
    userFilter="(ObjectClass=person)"
    scope="Subtree"
    otherRequiredUserAttributes="sn,givenname,cn" />
    </providers>
    </membership>
    <roleManager enabled="true">
    <providers>
    <add name="LdapRole"
    type="Microsoft.Office.Server.Security.LdapRoleProvider, Microsoft.Office.Server, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c"
    server="ldap.server.address"
    port="389"
    useSSL="false"
    connectionUsername="cn=ldapserviceid,ou=sharepoint,ou=test,ou=location,o=validobject"
    connectionPassword= "validpassword"
    groupContainer="OU=people,O=validobject"
    groupNameAttribute="cn"
    groupNameAlternateSearchAttribute="samAccountName"
    groupMemberAttribute="member"
    userNameAttribute="sAMAccountName"
    dnAttribute="distinguishedName"
    groupFilter="(&amp;(ObjectClass=group))"
    userFilter="(&amp;(ObjectClass=person))"
    scope="Subtree" />
    </providers>
    </roleManager>
    </system.web>
    I modified the web.config of the test application I created with these details
    <roleManager defaultProvider="c" enabled="true" cacheRolesInCookie="false">
    <providers>
    <add name="c" type="Microsoft.SharePoint.Administration.Claims.SPClaimsAuthRoleProvider, Microsoft.SharePoint, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" />
    <add name="LdapRole" type="Microsoft.Office.Server.Security.LdapRoleProvider, Microsoft.Office.Server, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c"
    server="ldap.server.address"
    port="389"
    useSSL="false"
    connectionUsername="cn=ldapserviceid,ou=sharepoint,ou=test,ou=location,o=validobject"
    connectionPassword= "validpassword"
    groupContainer="OU=people,O=validobject"
    groupNameAttribute="cn"
    groupNameAlternateSearchAttribute="samAccountName"
    groupMemberAttribute="member"
    userNameAttribute="cn"
    dnAttribute="dn"
    groupFilter="(&amp;(ObjectClass=group))"
    userFilter="(&amp;(ObjectClass=person))"
    scope="Subtree" />
    </providers>
    </roleManager>
    <membership defaultProvider="i">
    <providers>
    <add name="i" type="Microsoft.SharePoint.Administration.Claims.SPClaimsAuthMembershipProvider, Microsoft.SharePoint, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" />
    <add name="LdapMember" type="Microsoft.Office.Server.Security.LdapMembershipProvider, Microsoft.Office.Server, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c"
    server="ldap.server.address"
    port="389"
    useSSL="false"
    connectionUsername="cn=ldapserviceid,ou=sharepoint,ou=test,ou=location,o=validobject"
    connectionPassword= "validpassword"
    useDNAttribute="true"
    userDNAttribute="dn"
    userNameAttribute="cn"
    userContainer="OU=people,O=validobject"
    userObjectClass="person"
    userFilter="(ObjectClass=person)"
    scope="Subtree"
    otherRequiredUserAttributes="sn,givenname,cn" />
    </providers>
    </membership>
    With all of this configured, I can go to the new test site, I do see the form where I can choose either Windows authentication or Forms authentication. I can successfully login with Windows authentication, but forms authentication gives me me an error.
    The server could not sign you in. Make sure your user name and password are correct, and then try again.
    I can successfully login to a LDAP management tool, using the same credentials I entered on the form, so I know the username and password being submitted are correct. I get the following items in the event viewer
    8306 - SharePoint Foundation - The security token username and password could not be validated.
    in the SharePoint trace logs - Password check on 'testuser' generated exception: 'System.ServiceModel.FaultException`1[Microsoft.IdentityModel.Tokens.FailedAuthenticationException]: The security token username and password could not be validated. and
    then this:
    Request for security token failed with exception: System.ServiceModel.FaultException: The security token username and password could not be validated.
    at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.ReadResponse(Message response)
    at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.Issue(RequestSecurityToken rst, RequestSecurityTokenResponse& rstr)
    at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.Issue(RequestSecurityToken rst)
    at Microsoft.SharePoint.SPSecurityContext.SecurityTokenForContext(Uri context, Boolean bearerToken, SecurityToken onBehalfOf, SecurityToken actAs, SecurityToken delegateTo)
    I monitored the LDAP server and did a packet-trace on the communication happening between the SharePoint server and the LDAP server and it is a bit odd. It goes like this:
    The SharePoint server successfully connects to the LDAP server, binding the ldapserviceid+password
    The LDAP server tells the SharePoint server it is ready to communicate
    the SharePoint server sends an LDAP query to the LDAP server, asking if the name entered in the form authentication page can be found.
    The LDAP server does the query, successfully finds the entered name and sends a success message back to SharePoint
    The LDAP server sends notification that it is done and is closing the connection that was bound to theldapserviceid+password
    The SharePoint server acknowledges the connection is closing
    ... and then nothing happens, except the error on SharePoint
    What I understand is that the SharePoint server, once it gets confirmation that the submitted username exists in LDAP, should attempt to make a new LDAP connection, bound to the username and password submitted in the form (rather than the LDAP service account
    specified in the web.config). That part does not seem to be happening.
    I am at a standstill on this and any help would be greatly appreciated.

    OK, our problem was resolved by removing any information about the ASP.NET role manager. Initially, we had information about a role manager defined in three different web.config files, as well as in the SharePoint Central Administration site, where there
    is the checkbox to Enable Forms Based Authentication (you see this when you first create the new SharePoint app, or afterwards by modifying the Authentication Provider for the app.) In either case, you will see two text boxes, underneath the checkbox item
    for enabling Forms Based Authentication:
    "ASP.NET Membership provider name"
    "ASP.NET Role manager name"
    We entered a name for Membership provider, and left Role manager blank.
    In the web.config for the SharePoint Central Administration site, the SecurityTokenServiceApplication app, and the web app we created with FBA enabled, we entered the following:
    <membership>
    <providers>
    <add name="LdapMember"
    type="Microsoft.Office.Server.Security.LdapMembershipProvider, Microsoft.Office.Server, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c"
    server="ldap.server.address"
    port="389"
    useSSL="false"
    connectionUsername="cn=ldapserviceid,ou=sharepoint,ou=test,ou=location,o=validobject"
    connectionPassword="validpassword"
    useDNAttribute="false"
    userDNAttribute="dn"
    userNameAttribute="cn"
    userContainer="OU=people,O=validobject"
    userObjectClass="person"
    userFilter="(ObjectClass=person)"
    scope="Subtree"
    otherRequiredUserAttributes="sn,givenname,cn" />
    </providers>
    </membership>
    <roleManager>
    <providers>
    </providers>
    </roleManager>
    useDNAttribute="false" turned out to be important as well.
    So, for us to get LDAP authentication working between SharePoint 2010 and Novel eDirectory, we had to:
    leave anything related to the role provider blank
    configure the web.config in three different applications, with the proper connection information to reach our Novel eDir
    Ensure that useDNAttribute="false" was used in all three on the modified web.config files.
    Since our eDir is flat and used pretty much exclusively for external users, we had never done any sort of advanced role management configuration in eDir. So, by having role manager details in the web.config files, SharePoint was waiting for information from
    a non-existent role manager.

  • Siebel/Siteminder Netegrity (Computer Associates) SSO Integration

    Hello,
    The end client wants to integrate a SSO solution with Siteminder without purchasing the Siteminder custom security adapter. I have not yet seen this done before as I have always utilized the Siteminder custom security adapter when implementing SSO with Siebel. Currently, I have configured their authentication into Siebel using the standard Siebel LDAP Security Adapter to connect and authenticate to an Active Directory Server. I believe it would be possible to configure Siteminder to use the LDAP Security adapter and achieve SSO however; I am not clear as to what steps would need to be done in order to get this to work properly. Outside of the basic Siebel Enterprise Setup and the SWSE eapps.cfg setups for SSO would I just add the anonymous user account, which is currently being used by the LDAP Security Adapter by the SharedCredentinalsDN and which also holds the LDAP DB username and password, into the Siteminder HTTP header? Any advice on this would be greatly appreciated.
    Thanks

    With Siebel 7.7 and later (and possibly 7.5) it is theoretically possible to use Siteminder SSO with Siebel without the Computer Associates custom adapter. Please note, however, that Computer Associates does not officially support this approach and Oracle/Siebel's ability to support Siteminder issues is very limited.
    The basic outline of what needs to be done:
    1. You will use either the LDAPSecAdpt or ADSISecAdpt depending on what directory backends your Siteminder implementation. This must be an LDAP directory or Active Directory server that is supported by the Siebel security adapter. If it is not, then you will have to use the Siteminder customer adapter.
    2. Determine which attribute in the LDAP or ADSI directory contains the userID that matches up to a valid Siebel userID (i.e. in S_USERS). By default this would be sAMAccountName for ADSI and uid for LDAP. But this often is customized/changed.
    3. Configure Siteminder to pass the contents of that attribute as a custom HTTP header variable. For example SIEBEL_SSO_USER.
    The rest of the setup is documented in the Security Guide in the Single Sign-On Section. You will basically just need to add a few variables in the eapps.cfg and/or eapps_sia.cfg file(s) and then set the SingleSignOn and TrustToken parameters in the security adapter profile.
    Hope this helps.
    Stevan

  • Oracle BI Publisher 10x/11x Integration with Siebel CRM 8.2 Release

    Hello Gurus,
    We are in the process of implementing Siebel (8.2) Public Sector for one of our client and in term s of reporting we have decided to use latest version of OBIEE and BI Publisher and thus decided to go ahead with implementing BI Apps 7.9.6.3 combined package of (OBIEE 11.1.1.6, BI Publisher, Informatica 9.x, DAC 10.1.3.4.1 with hot fix).
    There is My Oracle Support (MOS) article # 1172844.1 (titled ‘Supporting Documentation for Siebel Reports by Product Version’) which explains that Oracle BI Publisher 10.1.3.4.2 version supports Siebel CRM release 8.2.
    Due to the limitations of the Oracle BI Publisher usage as per the Oracle support documentation, we need to make use of OBIEE 10g version for BI Publisher for integrating with Siebel 8.2 release and we need to also use OBIEE 11g for the main reporting and henceforth we end up maintaining 2 servers for reporting in our environment.
    Does Oracle BI Publisher 11.1.1.5 or 11.1.1.6 version cannot be integrated with Siebel 8.2? Is this not supported version with Seibel 8.2 version?
    Oracle BI Publisher architecture in 10g is different when compared to OBIEE 11g version and does it make any impact if we go ahead with 2 different versions pointing to pull the data from the OLTP source ( Siebel) ?
    I am looking out for exact approach to be followed for reporting requirements for this kind of scenario ?
    Help me with your inputs and suggestions on this.
    Thanks
    Praveen

    hi Praveen,
    Did you got any answer for this?
    Cheers,
    J

  • Business Object XI 3.1 Integration with Siebel CRM 8.1.1.1

    Hi Experts,
    We are planning to Integrate Business Objects XI 3.1 with Siebel CRM 8.1.1.1.
    Our requirement would be creating BO Universes on top of Siebel CRM Business Layer (Business Components) and expose these Universe for Ad-hoc reporting using Web Intelligence at InfoView portal. In addition we would like to leverage Siebel CRM Authentication and authorizations (positions) as well with Integration Kit.
    Found some of docs on BO with Siebel integration using crystal designer. But not on creation of Universe and then WebI Reports.
    And also found that Siebel Web Desktop for Ad-hoc reporting within Siebel portal. Not sure how it is similar to BO Web Intelligence reporting.
    Can any one please guide us the different possible options to achieve this requirement.
    Regards,
    Ravi Kumar Garre
    Edited by: Ravi Kumar Garre on Jan 27, 2010 5:56 PM
    Edited by: Ravi Kumar Garre on Jan 27, 2010 6:03 PM

    Hi Paul,
    I've left SAP on March 31th, 2011, so my information may not be 100% accurate.
    As far as I know, in Business Objects Suite XI4.0, there will no longer be Siebel Integration kit.
    Instead, Siebel related integration features are moved back into core products such as Crystal Reports and BOE.
    This means, you no longer need to have an installer for Siebel integration kit, when you installed Crystal Reports, it will bring you to Siebel connectivity after you install Crystal Reports. So does BOE.
    The similar approach applies to other integration kits as well such as SAP, PeopleSoft, JD Edwards, Oracle EBS.
    In Crystal Reports and BOE XI4.0, the Siebel integration feature remains with some improvements (check the product document for detail when you get XI4.0 BOBJ suite.)
    For Webi/Universe accessing Siebel request, I have no further update since then.
    You may want to go through your sales representitive/support channel to raise enhancement request/new feature request officially and get feedback.
    Hope this helps.
    Thanks and Regards
    Carlos Chen

Maybe you are looking for

  • Spool request

    Hi experts, I have created an error log in the background using JOB_OPEN  JOB_SUBMIT and  JOB_CLOSE. A job is being processed successfully and a spool is also being created with the job and all the records that are being read in the report are being

  • Automatic creation of purchase orders at goods receipts

    Dear guru , I want to create purchase order when i execute GR Returns (mvt 161). Where I define the purchase order document type that I want to automatic create ? Thanks.

  • Start up slow after a windows update

    I feel a little slow in windows start up in my notebook after a windows update, I have downloaded an install an update about 800mb but all components have not been installed successfully, again after one day back there was another update and it has i

  • Why can't I receive or forward my email on my IPad?

    I Cannot receive my email on my IPad since yesterday. I have Gmail.  Help

  • CS6 not recognizing plugins

    I installed plugins for CS6(64bit) in Program Files/Adobe/Adobe Photoshop CS6 (64 Bit)/Additional Plug-ins  and nothing!  CS6 doesn't recognize it, namely "dofpro.8bf" and it's companion file "convert.exe".  I have verified that the above path is in